CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-39247

There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.

Status: Published
Published: 2025-08-29
Updated: 2025-08-29
Assigning organization: hikvision

Description

There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hikvision HikCentral Professional

Versions between V2.3.1 and V2.6.2affected

Hikvision HikCentral Professional

Version V3.0.0affected

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikcentral-products/ ↗